First, let me say I'm not fully versed on the security statistics of either France or the US, being that I'm one of those polite Canadians you read about. Sorry, polite Canadians that you read about, eh?

That being said, my question is this: to perpetrate this sort of "hack-back" response, it would have to be assumed that the individual carrying it out would have the skill, the tools and the time to do it, "gracefully" or not. Given that, I'm sure this clever individual could also manage to dig up a phone number or email address for someone that could at least put him in touch with the "innocent" admin who owns the offending box. Wouldn't it just be easier to call this fellow proffesional and inform him that his box is spewing out junk, and that maybe he/she should address the issue? Maybe this is over simplifying things, but if this person is truly the victim of spoofing, they will probably be more than happy to look in to it. And you might just make a new friend in the process. I mean, process, eh?

Now, let loose the Canuck jokes! :)

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/98/15947#15947